CVE-2026-119868

HighCVSS 7.0/10Last modified Nov 10, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1198696.4Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.CVE-2026-119874.3The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable toCVE-2026-1198707.0Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally.CVE-2026-1198716.4Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.CVE-2026-1198726.4Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1198737.0Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.CVE-2026-1198747.0Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.CVE-2026-1198754.0Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.CVE-2026-1198767.0Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.CVE-2026-119886.5The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object RefereCVE-2026-1198807.5Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.CVE-2026-1198818.8Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-119868: High severity, CVSS 7.0 | Vulnix